The Human-Free Software Factory: Removing Threat
summary
Argues for a human-free pipeline where humans only change source code, CI/CD proves provenance with checksums and a trusted artifact store, and production removes SSH/RDP so no one can tamper live. Describes an Azure demo using Azure Git and Azure Pipelines with Habitat builder, a two-person commit rule, and a human approval gate; admits failures like accidentally locking out systems when hardening removes SSH. Recommends secrets tooling such as HashiCorp Vault or Akeyless.
AI-written summary · about
chapters (10)
- 0:00Start
- 0:36Who Am I
- 6:55Layers of Configuration Management
- 8:07Code and System Integrity
- 8:31Integrity Checks
- 9:15Remove Human Access from Production
- 20:08Using Azure Git with Azure Pipelines
- 22:12Examples of How Automation Worked for You
- 22:23Failures
- 25:59Do You See a Difference between Using Azure Versus Aws Versus Gcp
related talks
33mThe Human-Free Software Factory: Removing Threat
43mThe art of secure software: Zero-trust delivery pipelines
17mNo More Walled Gardens: Removing Barriers with SCM...
38mSecuring your CI/CD Pipeline
40mSecure by Default: Building an AI-Augmented, OSS-Powered Reusable CI/CD Pipeline
51mThe Build Release Pipeline Model for Mere Mortals
32mFrom Code to Trusted Release
01h 01mKeep your nose out of it. Denying yourself access to production